ZeroDay Findings
Sign inSign up

Findings

CVE-2026-6732

A flaw was found in libxml2.

Published Apr 23, 2026 · updated Aug 31, 2026 · xmlsoft libxml2

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 23, 2026 · NIST NVD

    Detected

    A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system

  2. Aug 31, 2026 · NIST NVD

    Updated

    A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system

Affected

  • cpe ibm/viosversion unspecified
  • cpe redhat/enterprise linux6.0
  • cpe redhat/enterprise linux7.0
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0
  • cpe redhat/hardened imagesversion unspecified
  • cpe redhat/jboss core servicesversion unspecified
  • cpe redhat/openshift container platform4.0
  • cpe xmlsoft/libxml2version unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-6732

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-6732

    A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type con

    nvd.nist.gov

References